Submission + - California Voting System Code Reviews Released (ca.gov)
zestyping writes: "Today, the California Secretary of State released the reports from what is probably the most comprehensive analysis of voting system source code to date. The reports cover optical scan and touchscreen voting systems by Diebold, Hart, and Sequoia that are used in many California counties.
Whereas the "red team" reports released last Friday described specific attack scenarios, these reports offer a detailed analysis of the software architecture and source code. All three reports identify significant security weaknesses in the respective systems, including susceptibility to tampering of voting machine firmware, the possibility of viral propagation, and vulnerabilities in the central election management software.
The Secretary of State has until tomorrow, August 3, to decide whether to decertify any voting systems, because she is required to give six months' notice of decertification before the California primary election next February."
Whereas the "red team" reports released last Friday described specific attack scenarios, these reports offer a detailed analysis of the software architecture and source code. All three reports identify significant security weaknesses in the respective systems, including susceptibility to tampering of voting machine firmware, the possibility of viral propagation, and vulnerabilities in the central election management software.
The Secretary of State has until tomorrow, August 3, to decide whether to decertify any voting systems, because she is required to give six months' notice of decertification before the California primary election next February."
